Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nXeF8dzXC5K3YpfOU8JF5eLJE-I.roa
File: nXeF8dzXC5K3YpfOU8JF5eLJE-I.roa (raw, json)
Hash identifier: XCEdkUk4XT/G9JDxwEG3YJpszscpt0SfjqQWYtWSgoo=
Subject key identifier: 9D:77:85:F1:DC:D7:0B:92:B7:62:97:CE:53:C2:45:E5:E2:C9:13:E2
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 018570DE31FC4C01D563F22ADBBF9813D074
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nXeF8dzXC5K3YpfOU8JF5eLJE-I.roa
Signing time: Mon 02 Jan 2023 05:04:48 +0000
ROA not before: Mon 02 Jan 2023 05:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46887
IP address blocks: 2a06:6540:2001::/48 maxlen: 48
2a06:6541:2001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:31:fc:4c:01:d5:63:f2:2a:db:bf:98:13:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 2 05:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d7785f1dcd70b92b76297ce53c245e5e2c913e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:96:45:0f:4b:44:ff:c1:d4:f9:2b:00:f9:
15:78:71:b2:62:57:0a:0c:14:c7:d4:db:86:46:a2:
ae:42:e4:c6:ed:de:30:1f:4b:91:a2:68:aa:55:60:
e9:91:3b:d9:7b:fc:ea:e3:a9:f5:f7:3c:e0:e1:d4:
83:74:c6:81:89:78:8c:8c:d5:f8:24:2d:2c:74:43:
e1:d9:c0:e9:c7:c3:8f:fd:53:d7:c2:c5:7d:92:69:
eb:ca:1c:6d:07:2e:77:f0:a3:33:98:63:dd:2c:f4:
70:a3:5d:71:a8:4c:00:44:3e:76:2f:0c:56:1e:b9:
e9:16:f2:8e:57:0c:8c:3b:2a:83:55:3f:32:f3:a8:
dc:45:c2:0f:04:94:57:59:98:97:15:d3:07:66:2a:
30:d9:15:ae:d3:fa:b7:16:a3:f0:6e:54:25:42:72:
3a:e8:09:f9:ff:16:24:74:18:ab:ad:2a:18:0e:99:
9a:9d:60:b7:a4:a8:5d:a9:78:50:18:8e:87:cb:53:
4a:41:32:53:f5:43:f9:ca:27:9d:92:f0:5d:ff:1f:
50:29:c1:ef:df:a9:35:dd:fb:e9:9b:ad:bd:9c:b0:
3e:b1:02:91:e7:23:e8:32:f5:9c:4c:13:8a:a1:b3:
0a:7f:53:65:00:75:6c:3f:d4:1d:87:26:9d:ff:e5:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:85:F1:DC:D7:0B:92:B7:62:97:CE:53:C2:45:E5:E2:C9:13:E2
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/nXeF8dzXC5K3YpfOU8JF5eLJE-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2001::/48
2a06:6541:2001::/48
Signature Algorithm: sha256WithRSAEncryption
36:63:69:7a:b0:65:b0:3a:d8:2c:fa:34:8e:55:d1:9d:f9:f2:
db:bc:d6:d0:17:b6:a5:d8:ba:89:54:34:97:88:f8:71:33:ed:
f6:62:ec:2a:7d:17:f9:92:8b:85:c6:d2:41:e1:b6:72:bd:38:
4e:69:37:5c:6d:e9:93:8b:d2:78:7e:20:a0:8c:ad:06:24:40:
ed:81:0c:9e:c6:d3:6b:33:c3:71:ba:2d:3e:cd:11:95:96:d7:
db:1f:3d:cc:be:54:c4:56:b7:f0:0b:8c:cb:a8:85:4f:b5:7e:
90:69:1b:10:a9:d1:97:b0:4c:fd:00:3a:5b:c4:bf:17:90:87:
a3:0f:2f:11:e6:84:f6:5a:08:a8:a6:f2:9e:43:df:44:36:b6:
cc:b4:a4:9d:35:c3:58:0c:30:6c:cc:f1:0d:df:ef:0b:f6:86:
6e:cc:73:57:5f:19:07:3f:f8:bd:1f:b6:0d:c2:27:34:20:65:
e6:ee:8a:8a:15:9f:87:a1:5e:ab:71:58:53:ee:35:9d:79:77:
3d:a5:80:3d:49:13:b0:67:86:7b:57:bd:f3:b6:eb:eb:cf:48:
05:fb:77:2a:d6:67:2d:f2:1d:14:70:13:9d:84:99:ab:74:ec:
41:3c:a8:e8:a5:e9:29:31:3d:89:45:11:4d:7c:63:15:65:f9:
42:b9:f9:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw3jH8TAHVY/Iq27+YE9B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjMwMTAyMDUwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDc3ODVmMWRjZDcwYjkyYjc2Mjk3Y2U1M2MyNDVlNWUyYzkxM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjuWRQ9LRP/B1PkrAPkVeHGyYlcK
DBTH1NuGRqKuQuTG7d4wH0uRomiqVWDpkTvZe/zq46n19zzg4dSDdMaBiXiMjNX4
JC0sdEPh2cDpx8OP/VPXwsV9kmnryhxtBy538KMzmGPdLPRwo11xqEwARD52LwxW
HrnpFvKOVwyMOyqDVT8y86jcRcIPBJRXWZiXFdMHZiow2RWu0/q3FqPwblQlQnI6
6An5/xYkdBirrSoYDpmanWC3pKhdqXhQGI6Hy1NKQTJT9UP5yiedkvBd/x9QKcHv
36k13fvpm629nLA+sQKR5yPoMvWcTBOKobMKf1NlAHVsP9Qdhyad/+Vc1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ13hfHc1wuSt2KXzlPCReXiyRPiMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvblhlRjhkelhDNUszWXBmT1U4SkY1ZUxKRS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgZlQCAB
AwcAKgZlQSABMA0GCSqGSIb3DQEBCwUAA4IBAQA2Y2l6sGWwOtgs+jSOVdGd+fLb
vNbQF7al2LqJVDSXiPhxM+32YuwqfRf5kouFxtJB4bZyvThOaTdcbemTi9J4fiCg
jK0GJEDtgQyextNrM8Nxui0+zRGVltfbHz3MvlTEVrfwC4zLqIVPtX6QaRsQqdGX
sEz9ADpbxL8XkIejDy8R5oT2WgiopvKeQ99ENrbMtKSdNcNYDDBszPEN3+8L9oZu
zHNXXxkHP/i9H7YNwic0IGXm7oqKFZ+HoV6rcVhT7jWdeXc9pYA9SROwZ4Z7V73z
tuvrz0gF+3cq1mct8h0UcBOdhJmrdOxBPKjopekpMT2JRRFNfGMVZflCuflA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:43 2024 by rpki-client on console-ams.rpki-client.org